WHAT IS CLAIMED IS: 



1 . A biometric passkey device configured to perform one or more transactions with a 
remote computer system without transmitting any biometric information to that remote 
5 computer system, the passkey device being configured to; 

(a) authenticate the identity of a user by comparing the user's unique 
biometric information with biometric information stored with the passkey 
device; 

(b) transmit unique passkey device information to the remote computer 
10 system to authenticate the identity of the passkey device; and 

(c) perform one or more transactions with the remote computer system if the 
identity of the user is first authenticated by the passkey device and the 
identity of the passkey device is next authenticated by the remote 
computer system. 
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2. The device of claim 1, wherein the device further comprises an authorization profile 
storage. 

3. The device of claim 1 ? wherein the device further comprises an audit log storage. 

4. The device of claim 1, wherein the device further comprises a substance detection 
sensor. 



5. The device of claim 4, wherein the substance detection sensor detects blood alcohol 
25 content of the user. 

6. The device of claim 1, wherein the unique passkey device information comprises a 
flag indicating the state of the passkey device. 
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7. The device of claim 6, wherein the flag indicates whether the device has authenticated 
the identity of the user. 

8. The device of claim 6, wherein the flag indicates the age of the user. 

9. The device of claim 1, wherein the device comprises a pointing device. 

10. The device of claim 1, wherein the device comprises a personal digital assistant. 

11. A system for performing secure transactions between a biometric passkey device and 
a remote computer system without transmitting any biometric information to that remote 
computer system, the system comprising: 

(a) a biometric passkey device configured to (i) authenticate the identity of a 
user by comparing the user's unique biometric information with biometric 
information stored with the passkey device; and (ii) transmit unique 
passkey device information to the remote computer system; and 

(b) a remote computer system configured to (i) authenticate the identity of 
the passkey device by comparing the unique passkey device information 
with device information stored on the remote computer system; and 
(ii) allow the passkey device to perform one or more transactions on the 
remote computer system if the identity of the user is first authenticated by 
the passkey device and the identity of the passkey device is next 
authenticated by the remote computer system. 

12. The system of claim 11, wherein the passkey device comprises a proxy passkey. 

13. The system of claim 11, wherein the passkey device further comprises an 
authorization profile storage. 
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14. The system of claim 11, wherein the passkey device further comprises an audit log 
storage. 

15. The system of claim 11, wherein the passkey device further comprises a substance 
5 detection sensor. 

16. The system of claim 11, wherein the unique passkey device information comprises a 
flag indicating the state of the passkey device. 

10 17. The system of claim 11, wherein the passkey device comprises a pointing device. 

18. The system of claim 11, wherein the passkey device comprises a personal digital 
assistant. 

15 19. The system of claim 11, wherein the remote computer system comprises retail 
computer system configured to allow users to make purchases. 



20. A method for performing secure transactions between a biometric passkey device and 
a remote computer system without transmitting any biometric information to that remote 
20 computer system, the method comprising: 

(a) authenticating the identity of a user by comparing the user's unique 
biometric information with biometric information stored with the passkey 
device; 

(b) transmitting unique passkey device information to the remote computer 
25 system; 

(c) authenticating the identity of the passkey device by comparing the unique 
passkey device information with device information stored on the remote 
computer system; and 

(d) performing one or more transactions on the remote computer system if the 
30 identity of the user is first authenticated by the passkey device and the 
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identity of the passkey device is next authenticated by the remote 
computer system. 

21. The method of claim 20, wherein the passkey device comprises a proxy passkey. 

5 

22. The method of claim 20, wherein the passkey device comprises an authorization 
profile storage. 

23. The method of claim 20, wherein the passkey device comprises an audit log storage. 
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24. The method of claim 20, wherein the passkey device comprises a substance detection 
sensor. 

25. The method of claim 20, wherein the unique passkey device information comprises a 
15 flag indicating the state of the passkey device. 

26. The method of claim 20, wherein the passkey device comprises a pointing device. 

27. The method of claim 20, wherein the passkey device comprises a personal digital 
20 assistant. 

28. The method of claim 20, wherein the remote computer system comprises retail 
computer system configured to allow users to make purchases. 
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